Privacy Policy

01Data Controller

Company

URBAN HOME S.À R.L.

Registered office

25A Boulevard Royal, L-2449 Luxembourg

RCS Luxembourg

B240068

VAT / TVA

LU34683502

Email

info@urbanhome.lu

Telephone

+352 621 186 048

Website

urbanhome.lu

02Introduction

URBAN HOME processes personal data strictly in accordance with the General Data Protection Regulation (GDPR) and Luxembourg data protection law. This Privacy Policy describes what personal data we collect, why we collect it, how we use it, and the rights available to data subjects in connection with our website urbanhome.lu and our real estate brokerage activities.

03Personal Data We Collect

Depending on the nature of the interaction, we may process the following categories of personal data:

• Identification data: full name, date of birth
• Contact details: email address, telephone number, postal address
• Professional information: company name, role, industry
• Communication data: content of messages, enquiries and correspondence
• Property-related data: search profile, viewing preferences, budget and pricing expectations
• AML/KYC data: identity documents, source-of-funds documentation (where legally required)
• Website usage data: IP address, browser type, pages visited, session duration
• Cookie data: strictly necessary session data (see Section 9)

04Purposes of Processing and Legal Bases

• Responding to enquiries and initial contact — Art. 6(1)(b) GDPR (pre-contractual measures)
• Real estate brokerage and contract preparation — Art. 6(1)(b) GDPR
• Client relationship management — Art. 6(1)(b) GDPR
• Viewing coordination and follow-up — Art. 6(1)(b) GDPR
• Compliance with AML/KYC obligations — Art. 6(1)(c) GDPR in conjunction with the Luxembourg AML Law
• Website security and operation — Art. 6(1)(f) GDPR (legitimate interest)
• Marketing communications, with explicit consent only — Art. 6(1)(a) GDPR

05AML / KYC Notice

Where required by applicable anti-money laundering legislation, URBAN HOME collects and verifies identity documents in accordance with the Luxembourg Law of 12 November 2004 on combating money laundering and terrorist financing, as amended.

06Retention Periods

• AML/KYC records: 5 years after the end of the business relationship — extendable to 10 years upon regulatory order (Art. 4 Luxembourg AML Law)
• Brokerage agreements and transaction documents: 10 years from the end of the contract
• Commercial and accounting records: 10 years (Luxembourg commercial law)
• General correspondence without a resulting contract: 3 years
• Website usage data and technical logs: 12 months

07Recipients of Personal Data

Personal data is shared only to the extent necessary for the processing purposes described above. Potential recipients include:

• IT and hosting providers
• Messaging service provider WhatsApp (Meta), if you contact us via WhatsApp
• Property portals, for the purpose of marketing properties
• Notaries and legal advisers, in the context of property transactions
• Competent authorities, where legally required
• Professional service providers engaged in the performance of contracts

08International Transfers

Where personal data is transferred outside the European Economic Area (EEA), such transfers are made exclusively on the basis of an adequacy decision by the European Commission, Standard Contractual Clauses (SCCs), or other safeguards recognised under the GDPR.

09Cookies

urbanhome.lu uses strictly necessary cookies only. No analytics, marketing or third-party cookies are set.

• Strictly necessary cookies: session cookies required for secure website operation
• Functional cookies: none
• Analytics / performance cookies: none
• Marketing / advertising cookies: none

As only strictly necessary cookies are used, no separate consent banner is required under the ePrivacy Directive or the GDPR.

10Contact via WhatsApp

You can also contact us via WhatsApp. The WhatsApp button on our website is a simple link: no data is sent to WhatsApp until you click it and start a chat.

If you write to us on WhatsApp, we receive your telephone number, your profile name and the content of your messages, and we use them to answer your enquiry (Art. 6(1)(b) GDPR for pre-contractual requests, otherwise Art. 6(1)(f) GDPR). WhatsApp Ireland Limited (Meta group) processes the message data and technical metadata as a separate controller under its own terms; see the WhatsApp Privacy Policy. Message content is end-to-end encrypted in transit. WhatsApp may transfer data outside the EEA on the safeguards described in its policy.

Please do not send identity documents or other sensitive documents via WhatsApp. If you prefer not to use WhatsApp, contact us by email or telephone instead.

11Your Rights

Data subjects have the following rights with respect to personal data processed by URBAN HOME:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to object (Art. 21 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise any of these rights, write to info@urbanhome.lu.

12Right to Lodge a Complaint

Data subjects may lodge a complaint with the Luxembourg data protection authority, the CNPD (Commission Nationale pour la Protection des Données): cnpd.public.lu.

13Data Security

URBAN HOME implements appropriate technical and organisational measures to protect personal data, including:

• Encrypted data transmission (TLS/HTTPS) on urbanhome.lu
• Access restrictions based on the principle of least privilege
• Regular review of systems and service providers
• Confidentiality obligations for all persons with access to personal data

14Privacy Contact

URBAN HOME — Data Protection
25A Boulevard Royal, L-2449 Luxembourg
info@urbanhome.lu